Where The ASD sits in the flow of extraction.
Australian Signals Directorate
The Commonwealth's cyber security agency. Services Australia notified it of the OpenAI incident on 15 September, and the government's own standard for agencies reporting incidents to it, the Protective Security Policy Framework, sets no fixed clock, only 'as soon as possible'; on ASD's 2025 figures, only 35 per cent of Commonwealth entities reported at least half the incidents they saw.